@1aboveio/skills 1.0.13 → 1.0.14

package/skills/app-dev/android-development/references/workspace.md

@@ -0,0 +1,156 @@
+# Android workspace lifecycle
+
+The coordinator or caller owns workspace selection. Resolve it once, before any setup stage,
+and record the result. This reference owns workspace and runtime ownership: which resources
+this run owns, which of them persist across attempts and which are per-run. Cache layout, SDK
+isolation and the concrete stop commands stay in [setup.md](setup.md),
+[Owned development session](setup.md#owned-development-session) and
+[Owned-resource cleanup](setup.md#owned-resource-cleanup).
+
+## Precedence
+
+1. **Assigned workspace and candidate HEAD.** When the caller supplies an isolated workspace
+   and a candidate HEAD, use that workspace and that revision. Do not create a worktree or
+   branch, fetch, reset or switch revisions. Read `git rev-parse HEAD` and report it as the
+   source SHA. If it differs from the candidate HEAD, stop and report the mismatch; never
+   switch the workspace to match.
+2. **Existing owned workspace.** Feature work, fixes and diagnosis reuse the workspace this
+   run or unit already owns, with its private caches, venv and AVD profile. Do not make a
+   second workspace for a retry, a correction or a read-only investigation.
+3. **Standalone fresh setup.** Only when the coordinator reports no usable assignment. Create
+   one managed workspace at
+   `<repo>/.resolve-issues/rush/<run-id>/units/native`. Never create a sibling checkout such
+   as `../<repo>-android-setup`, and never add a second managed path for a retry.
+
+Android and iOS setup in the same run share that one managed workspace; their private cache
+subdirectories and short-lived processes stay separate.
+
+An assigned path that is missing, is not a Git worktree, or is at another revision is not an
+invitation to substitute a fresh checkout: stop and report it. For diagnosis, name the actual
+checkout and HEAD and confirm it contains the failing code; the repository root or another
+checkout may lag the candidate.
+
+## Record before creating
+
+The bundled `scripts/workspace-runtime` is generated from the shared lifecycle
+engine and ships with this skill. Only for standalone fresh setup, run:
+
+```bash
+node <skill-base-dir>/scripts/workspace-runtime/bin/workspaces.mjs native-start --repo <canonical-root> \
+  --platform android --target <verified-target-branch> --base <candidate-SHA> --json
+```
+
+The command records root, owner, exact base, branch, workspace and disposable cache
+paths before creating anything. Use its returned `workspace` as `ASSIGNED_WORKSPACE`
+and `sourceSha` as `CANDIDATE_HEAD` in setup. Keep `run` and `runId`; repeat with
+`--run-id <returned-run-id>` and the same base, target and kind for retries. Never
+invoke it inside a coordinator-assigned unit. It never substitutes `origin/main`
+for the requested source or resets an existing workspace.
+For a package below the root, pass `--native-dir <package-root-containing-android>`.
+Declare other installs or build directories before use with repeated
+`--disposable <exact-workspace-relative-path>`, including package-local `node_modules`.
+
+## Development workspace, owned session runtime and disposable runs
+
+The workspace, its private caches under `.cache/`, its venv and its AVD profile are
+development resources: retain them across retries and fixes, and keep them private to this
+workspace. Never relocate them to a global cache or share them with a concurrent owner.
+
+The owned **development session** has one lifecycle per owner. Start it once, record its PID
+identity, serial, ports and log paths, and reuse it across every edit, fix and check attempt
+in the session:
+
+- the development emulator and the ADB endpoint it publishes, addressed by its owned serial;
+- Metro, or the repo's development server, on its recorded port;
+- one compatible Gradle daemon on the workspace's private `GRADLE_USER_HOME`, honoring the
+  repo's JVM and resource-capacity settings;
+- the build outputs and installed app state under the workspace.
+
+Within one session, do not start a second emulator, Metro, daemon or cache home because
+the running one is inconvenient: keep the existing owner, do not create a second lifecycle,
+and do not accumulate abandoned services. Long-lived processes stay under the harness's own
+tracking so their exit is observable. Never `nohup`, `setsid` or `disown` a service into a
+state this run cannot signal, and never leave one with no owner at all.
+
+**Disposable acceptance and integration resources** follow their checkpoint's contract.
+The `device-run.sh` emulator child, PostgreSQL container and named database exist for one
+journey and are stopped by that run under [cleanup](setup.md#owned-resource-cleanup).
+Do not start that stack for every edit. A fresh install does not automatically require a
+new AVD or reboot: an existing owned emulator may be used when the gate permits it and
+disposable app/test data can be isolated without destroying development state. Do not
+inherit development authentication/database state as proof, or clear a borrowed device.
+
+A session ends when the assignment ends, not when one check passes. Stop the services this
+run started and confirm their exit under the existing cleanup rules, or hand off the ones
+still running with their owner, PID identity, serial, ports, log paths and how to stop them.
+A passing check, a reported result or a review handoff is not a session end.
+The stop must match the resource: use the harness owner for supervised groups and a
+verified private stop for daemons; do not shell-wait a nonchild or treat a wrapper's exit
+as proof that its descendants stopped. Record uncertain cleanup as retained, not success.
+
+Fast feedback comes from reuse, not from a fresh environment per attempt:
+
+- Go incremental: one bounded edit/check cycle, reading the previous result before the next.
+  Build only when changed native or packaged inputs require it; refreshable JS needs no build.
+- Do not recreate state for a clean start: no second emulator boot, Metro restart, `adb
+  kill-server`, fresh Gradle daemon, `clean`, dependency reinstall or `expo prebuild` of a
+  tracked native project for an ordinary fix.
+- Prefer the cheapest check that proves the change (focused test, relevant typecheck, an app
+  that is already running) before scheduling the disposable device stack.
+- Add no new pool, lease manager, snapshot-default AVD, provisioning script or second
+  launcher to make reuse work; the existing owner, launcher and cleanup rules are the
+  mechanism.
+
+A read-only diagnosis does not require a clean environment. Reuse the owned workspace, its
+caches and the session this run still owns; create only the services the observation needs,
+and preserve the failed environment's evidence. Do not rebuild, reinstall or re-provision
+merely because the failure is being investigated.
+
+## Parallel development sessions
+
+Assign warm servers by independently changing source/configuration, not by agent count.
+Keep each session warm between its own checks:
+
+| Work arrangement | Runtime rule |
+| --- | --- |
+| Independent worktrees, branches or runtime configurations | Use separate Metro instances rooted in their actual workspaces, unique host ports and explicit device mappings. Keep writable caches, build outputs and test data private. |
+| Several readers or intentionally integrated checks on the same source/configuration | Reuse one server under a designated owner. Coordinate edits and check snapshots; record that results cover the combined working state, not isolated candidates. |
+| Limited device/host capacity | Run ready host checks concurrently and schedule conflicting device checks through the existing owner. Do not start excess emulators or create a new pool/lease system. |
+
+For example, one emulator may map its device port 8081 to session A's private host port,
+while a different emulator maps its device port 8081 to session B's private host port.
+The host ports must differ; the device-local ports need not. Use the caller-selected ADB
+endpoint and exact owned serial. Verify the app's actual bundle source, not only `/status`.
+
+Do not point one Metro at alternating candidate trees or mutate another session's reverse
+mapping, installed app or database. Keep device state exclusive during mutating checks.
+If one device must serve different candidates sequentially, end the previous check and
+let its owner explicitly reassign/reconfigure it and verify the new app/source mapping;
+do not silently switch it while a test is running. Sharing a server does not make concurrent
+writes to the same source tree independent or protect tests from mid-run source changes.
+
+Do not assume a shared backend is safe for fixtures: share only when its isolation and
+ownership contract explicitly permit it; otherwise keep candidate test data separate.
+Stop shared services only through their owner after all users release them, or explicitly
+hand them off. Do not kill a shared server because one agent finished its task.
+
+## Completion
+
+At the end of the assignment, return the workspace, its cache paths and any retained process
+records to the coordinator for final cleanup. The coordinator owns deletion and retention.
+Register the path with the run's cleanup owner so final cleanup can tell a delivered
+standalone run from unfinished or unpublished work.
+
+- A successful, delivered standalone run must not retain an unbounded cache: mark the
+  workspace and its disposable caches for final cleanup. After stopping its owned
+  services, run `node <skill-base-dir>/scripts/workspace-runtime/bin/workspaces.mjs native-finish --run <run> --json`
+  from the owner checkout. This uses the same cleanup engine as issue workflows.
+- Unfinished or unpublished standalone work keeps the workspace and caches for the next
+  attempt; report what is retained and why.
+
+The parent lifecycle record is authoritative for ownership, retention and final cleanup.
+Before `native-finish`, record the session's end: either the services this run started were
+stopped and their exit confirmed, or the ones still running were handed off explicitly as
+described above.
+An explicit handoff does not authorize removing a workspace or cache still used by the
+receiving owner. Retain it until ownership and delivery cleanup checks permit removal.

package/skills/app-dev/android-development/scripts/init.mjs

@@ -0,0 +1,380 @@
+// Explicit Android project setup. Preview by default; adds only missing guidance.
+import fs from 'node:fs'
+import os from 'node:os'
+import path from 'node:path'
+import { spawnSync } from 'node:child_process'
+import { fileURLToPath, pathToFileURL } from 'node:url'
+
+const sectionTitle = 'Android development'
+const sectionId = 'android'
+const usage = 'node init.mjs [--repo-root <dir>] [--write]'
+
+function parseArgs(argv) {
+  const options = { write: false }
+  for (let i = 0; i < argv.length; i++) {
+    const arg = argv[i]
+    if (arg === '--write') options.write = true
+    else if (arg === '--help') options.help = true
+    else if (arg === '--repo-root') {
+      const value = argv[++i]
+      if (!value || value.startsWith('--') || /[\r\n]/.test(value)) throw new Error(`missing or invalid value for ${arg}`)
+      options.repoRoot = path.resolve(value)
+    } else throw new Error(`unknown argument ${arg}`)
+  }
+  return options
+}
+
+function gitOutput(root, args) {
+  const result = spawnSync('git', ['-C', root, ...args], { encoding: 'utf8' })
+  return result.status === 0 ? result.stdout.trim() : null
+}
+
+function contains(outer, inner) {
+  const relative = path.relative(outer, inner)
+  return relative === '' || (!relative.startsWith(`..${path.sep}`) && relative !== '..' && !path.isAbsolute(relative))
+}
+
+function selectRoot(options) {
+  const selected = options.repoRoot ?? gitOutput(process.cwd(), ['rev-parse', '--show-toplevel']) ?? process.cwd()
+  const root = fs.realpathSync(selected)
+  if (!fs.statSync(root).isDirectory()) throw new Error('project root is not a directory')
+  // A home directory holds global agent configuration, not project guidance.
+  if (contains(root, fs.realpathSync(os.homedir()))) {
+    throw new Error('selected root is the home directory or one of its ancestors; pass the project root')
+  }
+  return { root, selected: options.repoRoot ?? null }
+}
+
+function sectionBody() {
+  return fs.readFileSync(fileURLToPath(new URL('../references/android-conventions.md', import.meta.url)), 'utf8').trim()
+}
+
+function resolveTarget(root, name) {
+  const file = path.join(root, name)
+  const stat = fs.lstatSync(file, { throwIfNoEntry: false })
+  if (!stat) return { name, file, target: file, inode: null, nlink: 0, exists: false, link: false }
+  let target
+  try {
+    target = fs.realpathSync(file)
+  } catch {
+    throw new Error(`${name} is a dangling or inaccessible link; repair it before initializing`)
+  }
+  if (!contains(root, target)) throw new Error(`${name} resolves outside the selected project`)
+  const info = fs.statSync(target)
+  if (!info.isFile()) throw new Error(`${name} is not a regular file`)
+  return {
+    name,
+    file,
+    target,
+    inode: { dev: info.dev, ino: info.ino },
+    nlink: info.nlink,
+    exists: true,
+    link: stat.isSymbolicLink(),
+  }
+}
+
+function readGuidance(entry) {
+  if (!entry.exists) return { ...entry, current: null }
+  let bytes
+  try {
+    fs.accessSync(entry.target, fs.constants.R_OK)
+    bytes = fs.readFileSync(entry.target)
+  } catch {
+    throw new Error(`${entry.name} is unreadable`)
+  }
+  let current
+  try {
+    current = new TextDecoder('utf-8', { fatal: true, ignoreBOM: true }).decode(bytes)
+  } catch {
+    throw new Error(`${entry.name} is not valid UTF-8 guidance`)
+  }
+  return { ...entry, current }
+}
+
+// CLAUDE.md is a protected entrypoint. Learn only its identity, never its content.
+function inspectClaude(root) {
+  try {
+    const file = path.join(root, 'CLAUDE.md')
+    const stat = fs.lstatSync(file, { throwIfNoEntry: false })
+    if (!stat) return null
+    const target = fs.realpathSync(file)
+    if (!contains(root, target)) return null
+    const info = fs.statSync(target)
+    if (!info.isFile()) return null
+    return { file, target, inode: { dev: info.dev, ino: info.ino } }
+  } catch {
+    return null
+  }
+}
+
+function sameFile(left, right) {
+  if (!left || !right) return false
+  if (left.target === right.target) return true
+  return Boolean(left.inode && right.inode
+    && left.inode.dev === right.inode.dev && left.inode.ino === right.inode.ino)
+}
+
+function indentWidth(line) {
+  let width = 0
+  for (const char of line) {
+    if (char === ' ') width += 1
+    else if (char === '\t') width += 4 - (width % 4)
+    else break
+  }
+  return width
+}
+
+function stripInlineCode(line) {
+  const runs = [...line.matchAll(/`+/g)]
+  let result = ''
+  let cursor = 0
+  for (let i = 0; i < runs.length; i++) {
+    const opening = runs[i]
+    let closing = i + 1
+    while (closing < runs.length && runs[closing][0].length !== opening[0].length) closing++
+    if (closing === runs.length) continue
+    const end = runs[closing].index + runs[closing][0].length
+    result += line.slice(cursor, opening.index) + ' '.repeat(end - opening.index)
+    cursor = end
+    i = closing
+  }
+  return result + line.slice(cursor)
+}
+
+function stripHtmlComments(line, depth = 0) {
+  let text = ''
+  let index = 0
+  const comments = []
+  while (index < line.length) {
+    const start = line.indexOf('<!--', index)
+    const end = line.indexOf('-->', index)
+    if (start !== -1 && (end === -1 || start < end)) {
+      if (depth === 0) {
+        const close = line.indexOf('-->', start + 4)
+        if (close !== -1) comments.push(line.slice(start, close + 3))
+      }
+      text += depth === 0 ? line.slice(index, start) : ' '.repeat(start - index)
+      index = start + 4
+      depth += 1
+    } else if (end !== -1) {
+      if (depth > 0) {
+        text += ' '.repeat(end + 3 - index)
+        depth -= 1
+      } else {
+        text += line.slice(index, end + 3)
+      }
+      index = end + 3
+    } else {
+      text += depth === 0 ? line.slice(index) : ' '.repeat(line.length - index)
+      break
+    }
+  }
+  return { text, depth, comments }
+}
+
+// Markdown-aware view: inactive lines are fenced code, indented code or HTML comments.
+// Inline code and HTML comments are blanked from active text so examples never count.
+function markdownView(current) {
+  const lines = []
+  let fence = null
+  let commentDepth = 0
+  let indented = false
+  let previousBlank = true
+  for (const raw of current.split('\n')) {
+    const line = raw.endsWith('\r') ? raw.slice(0, -1) : raw
+    const blank = line.trim() === ''
+    let active = true
+    let text = line
+    let comments = []
+    if (fence) {
+      active = false
+      const close = /^ {0,3}(`{3,}|~{3,})[ \t]*$/.exec(line)
+      if (close && close[1][0] === fence.char && close[1].length >= fence.length) fence = null
+    } else if (commentDepth > 0) {
+      const comment = stripHtmlComments(line, commentDepth)
+      text = comment.text
+      commentDepth = comment.depth
+      comments = comment.comments
+    } else {
+      const open = /^ {0,3}(`{3,}|~{3,})(.*)$/.exec(line)
+      if (open && !(open[1][0] === '`' && open[2].includes('`'))) {
+        fence = { char: open[1][0], length: open[1].length }
+        active = false
+        indented = false
+      } else if (blank) {
+        indented = false
+      } else if (indentWidth(line) >= 4 && (previousBlank || indented)) {
+        active = false
+        indented = true
+      } else {
+        indented = false
+        const comment = stripHtmlComments(stripInlineCode(line))
+        text = comment.text
+        commentDepth = comment.depth
+        comments = comment.comments
+      }
+    }
+    previousBlank = blank
+    lines.push({ raw: line, text: active ? text : '', active, comments })
+  }
+  return lines
+}
+
+function append(current, body) {
+  const separator = current.endsWith('\n\n') ? '' : current.endsWith('\n') ? '\n' : '\n\n'
+  return `${current}${separator}${body.trim()}\n`
+}
+
+function hasHeading(current, title) {
+  const lines = markdownView(current)
+  for (let i = 0; i < lines.length; i++) {
+    const line = lines[i]
+    if (!line.active) continue
+    const atx = /^ {0,3}(#{1,6})(?:[ \t]+(.*?))?[ \t]*$/.exec(line.text)
+    if (atx) {
+      const content = (atx[2] ?? '').replace(/[ \t]+#+[ \t]*$/, '').trim()
+      if (atx[1].length === 2 && content === title) return true
+      continue
+    }
+    const next = lines[i + 1]
+    if (line.text.trim() === title && next && next.active && /^ {0,3}-+[ \t]*$/.test(next.text)) {
+      return true
+    }
+  }
+  return false
+}
+
+function countMarkers(lines, start, end) {
+  const starts = []
+  const ends = []
+  let order = 0
+  for (const line of lines) {
+    for (const comment of line.comments) {
+      if (comment === start) starts.push(order)
+      else if (comment === end) ends.push(order)
+      order++
+    }
+  }
+  return { starts, ends }
+}
+
+function preserveOrAdd(current, title, id, body) {
+  const start = `<!-- conventions:${id}:start -->`
+  const end = `<!-- conventions:${id}:end -->`
+  const { starts, ends } = countMarkers(markdownView(current), start, end)
+  if (starts.length !== ends.length || starts.length > 1 || (starts.length && starts[0] > ends[0])) {
+    throw new Error(`malformed ${title} section markers; preserve and repair existing guidance first`)
+  }
+  if (starts.length || hasHeading(current, title)) return current
+  return append(current, `${start}\n${body}\n${end}`)
+}
+
+function linkFrom(from, to) {
+  return path.relative(path.dirname(from.target), to.file).split(path.sep).join('/')
+}
+
+function hasLoader(current, from, to) {
+  const text = markdownView(current).map(line => line.text).join('\n')
+  const links = /\[[^\]\r\n]*\]\(\s*(?:<([^>]+)>|([^\s)]+))(?:\s+["'][^"'\r\n]*["'])?\s*\)/g
+  for (const match of text.matchAll(links)) {
+    const href = match[1] ?? match[2]
+    if (!href || /^[a-z][a-z\d+.-]*:|^\/\//i.test(href)) continue
+    let target
+    try {
+      const link = new URL(href, pathToFileURL(from.target))
+      if (link.hash && decodeURIComponent(link.hash) !== '#android-development') continue
+      link.hash = ''
+      link.search = ''
+      target = fileURLToPath(link)
+    } catch {
+      continue
+    }
+    if (fs.existsSync(target)) target = fs.realpathSync(target)
+    if (target === to.target) return true
+  }
+  return false
+}
+
+function planInitialization(root) {
+  const claude = inspectClaude(root)
+  const [agents, contributing] = ['AGENTS.md', 'CONTRIBUTING.md'].map(name => resolveTarget(root, name))
+  if (agents.target === contributing.target) {
+    throw new Error('agent instructions and CONTRIBUTING.md must use distinct files')
+  }
+  if (agents.inode && contributing.inode && agents.inode.dev === contributing.inode.dev
+    && agents.inode.ino === contributing.inode.ino) {
+    throw new Error('agent instructions and CONTRIBUTING.md must use distinct files')
+  }
+
+  for (const entry of [agents, contributing]) {
+    // Reading through a link to the protected entrypoint would read CLAUDE.md.
+    if (claude && entry.link && sameFile(entry, claude)) {
+      throw new Error(`${entry.name} resolves to the protected CLAUDE.md entrypoint; initialization never reads or edits CLAUDE.md`)
+    }
+  }
+
+  const agentsEntry = readGuidance(agents)
+  const contributingEntry = readGuidance(contributing)
+
+  let agentText = agentsEntry.current ?? '# Agent instructions\n'
+  if (!hasLoader(agentText, agentsEntry, contributingEntry)) {
+    const heading = hasHeading(agentText, sectionTitle) ? '' : `## ${sectionTitle}\n\n`
+    agentText = append(agentText, `${heading}Follow [CONTRIBUTING.md](${linkFrom(agentsEntry, contributingEntry)}) for this project's Android validation ladder, device proof and required gates.`)
+  }
+
+  const contributingText = preserveOrAdd(contributingEntry.current ?? '# Contributing\n', sectionTitle, sectionId, sectionBody())
+
+  const plan = [
+    { ...agentsEntry, next: agentText },
+    { ...contributingEntry, next: contributingText },
+  ]
+
+  for (const entry of plan) {
+    if (entry.current === entry.next) continue
+    if (claude && sameFile(entry, claude)) {
+      throw new Error(`${entry.name} shares its file with the protected CLAUDE.md entrypoint; initialization never edits CLAUDE.md`)
+    }
+    if (entry.exists && entry.nlink > 1) {
+      throw new Error(`${entry.name} is hard-linked to another file; initialization will not change a file it does not exclusively own`)
+    }
+  }
+
+  return plan
+}
+
+function assertWritable(plan) {
+  for (const entry of plan) {
+    if (entry.current === entry.next) continue
+    const target = entry.current === null ? path.dirname(entry.target) : entry.target
+    try {
+      fs.accessSync(target, fs.constants.W_OK)
+    } catch {
+      throw new Error(`${entry.name} is not writable; nothing was changed`)
+    }
+  }
+}
+
+function main(argv) {
+  const options = parseArgs(argv)
+  if (options.help) {
+    console.log(usage)
+    return
+  }
+  const { root } = selectRoot(options)
+  const plan = planInitialization(root)
+  if (options.write) assertWritable(plan)
+  console.log(`android-development init: ${options.write ? 'write' : 'preview only'} (${root})`)
+  for (const entry of plan) {
+    const action = entry.current === entry.next ? 'unchanged' : entry.current === null ? 'create' : 'update'
+    if (options.write && action !== 'unchanged') fs.writeFileSync(entry.target, entry.next)
+    console.log(`  ${entry.name}: ${!options.write && action !== 'unchanged' ? 'would ' : ''}${action}`)
+  }
+  console.log('Existing sections are preserved; initialization does not refresh project policy, install tools, provision devices or authorize delivery actions.')
+}
+
+try {
+  main(process.argv.slice(2))
+} catch (error) {
+  console.error(`android-development init: ${error.message}`)
+  process.exitCode = 2
+}

package/skills/app-dev/app-debug/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: app-debug
 description: "Diagnose runtime failures in deployed Cloud Run services — 5xx/422 errors, tracebacks, Next.js SSR/hydration or Server Action failures, DB/Secret Manager connection errors, cold-start timeouts, container OOM. NOT for build or deploy failures (cloud-debug)."
-release-version: 0.45.2
+release-version: 0.46.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # App Debug

package/skills/app-dev/better-auth/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: better-auth
 description: "Add or debug Better Auth for Next.js App Router: login, sessions, protected routes, middleware, OAuth (including Feishu/Lark), cookies, Prisma, and Auth.js migration."
-release-version: 0.45.2
+release-version: 0.46.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Better Auth for Next.js

package/skills/app-dev/data-catalog/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: data-catalog
 description: "Column definitions for warehouse tables, written inside the Spark/PySpark or SQL script that builds each table (CATALOG_TABLE / CATALOG_FIELDS, or a `-- @field` comment block), with a generated markdown catalog in docs/catalog/ and a CI check that fails a PR whose catalog is stale. Use when writing or changing a table script that adds, renames, removes, or changes the meaning of an output column or feature; when asked what a warehouse column or feature means; to set a repo up ('init the data catalog', 'generate the data dictionary', '字段字典', 'add catalog CI'); or to audit existing SQL or Spark scripts for undocumented columns. NOT for implementing or tuning the Spark job itself (pyspark), DAG wiring (airflow), or general workflow YAML (github-actions)."
-release-version: 0.45.2
+release-version: 0.46.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Data catalog

package/skills/app-dev/data-quality/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: data-quality
 description: "Check a published warehouse table's data against its data-catalog definitions with read-only SELECTs: columns never filled or stuck at one value, counts below zero, ratios outside 0–1, declared values that never appear and undeclared values that do. Then classify each finding as a wrong definition, wrong code, or wrong data. Use when asked whether a table's data is right, to profile or sanity-check a dwd/ads table, to find dead or constant columns, to check a column's values against its documented list, after a pipeline change ships, or when a data-catalog definition and the data might disagree. NOT for validating a Spark change before it ships (pyspark canary and reconciliation), writing definitions (data-catalog), or monitoring dashboards."
-release-version: 0.45.2
+release-version: 0.46.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Data quality

package/skills/app-dev/ios-foundation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: ios-foundation
-description: "Set up and prove an Expo / React Native native iOS workspace from an assigned or fresh isolated workspace to a manual Login smoke on an owned iOS Simulator: isolated workspace and private caches, Xcode/runtime/CocoaPods preflight, frozen install with `pod install --deployment`, platform-scoped prebuild, an ad-hoc-signed Debug simulator build, a private simulator by exact UDID, Metro on a free port, a disposable PostgreSQL backend with owned cleanup, and the evidence record (setup proof only; feature work reports the smoke result). Use for 'set up iOS', 'build the iOS app', 'run the app on the iOS simulator', 'add iOS to the React Native app', 'prove the iOS build', or when a pod install, xcodebuild, simulator boot, Metro connection or Keychain session fails. NOT for Android (android-foundation), signing, TestFlight or App Store release, or general workflow YAML (github-actions)."
-release-version: 0.45.2
+description: "Set up and prove an Expo / React Native native iOS workspace from an assigned or fresh isolated workspace to a manual Login smoke on an owned iOS Simulator: isolated workspace and private caches, Xcode/runtime/CocoaPods preflight, frozen install with `pod install --deployment`, platform-scoped prebuild, an ad-hoc-signed Debug simulator build, a private simulator by exact UDID, Metro on a free port, a disposable PostgreSQL backend with owned cleanup, and the evidence record (setup proof only; feature work reports the smoke result). Use for 'set up iOS', 'build the iOS app', 'run the app on the iOS simulator', 'add iOS to the React Native app', 'prove the iOS build', or when a pod install, xcodebuild, simulator boot, Metro connection or Keychain session fails. NOT for Android (android-development), signing, TestFlight or App Store release, or general workflow YAML (github-actions)."
+release-version: 0.46.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # iOS foundation

package/skills/app-dev/monorepo/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: monorepo
 description: Turborepo architecture for shared packages, pnpm workspaces, DAL boundaries, and pipelines.
-release-version: 0.45.2
+release-version: 0.46.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Turborepo Monorepo Architecture

package/skills/app-dev/nextjs-fullstack/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: nextjs-fullstack
 description: "Build or debug Next.js App Router features with React 19 — pages/layouts/route handlers, Server/Client Components, Server Actions, forms, middleware, DAL, strict TypeScript, Zod — plus our conventions: nuqs URL state, SWR cache, Skeleton/Progress + Sonner feedback, drag-and-drop upload, the portal app shell, list pages as filter/sort/paginate tables. shadcn component mechanics: see the shadcn skill."
-release-version: 0.45.2
+release-version: 0.46.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Next.js 16 Fullstack Development

package/skills/app-dev/prisma-setup/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: prisma-setup
 description: Use when adding or debugging Prisma with PostgreSQL, Next.js, or Turborepo, including schema.prisma, prisma.config.ts, client generation, migrations, seeds, relations, adapters, and DAL/database-layer setup. Triggers on phrases like "Prisma schema", "prisma migrate", "schema.prisma", "seed the database", "PrismaClient error", "relation issue", or "database layer".
-release-version: 0.45.2
+release-version: 0.46.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Prisma v7 Setup Guide

package/skills/app-dev/pyspark/SKILL.md

@@ -12,7 +12,7 @@ description: >
   Connect, spark-submit, Hudi commits, backfills, validate-only canaries,
   cluster reconciliation, or Spark event-log profiling — including warehouse
   job timeouts, empty Hudi writes, or EMR/Dataproc performance regressions.
-release-version: 0.45.2
+release-version: 0.46.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # PySpark

package/skills/app-dev/python-backend/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: python-backend
 description: "Python backend architecture for FastAPI, Tortoise ORM, Pydantic Settings, loguru, and uv. Also: uv.lock installs in CI/Docker via a proxy or mirror (`uv sync --frozen` bypasses it), slow uv installs on runners, relocking."
-release-version: 0.45.2
+release-version: 0.46.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Python Backend Conventions

package/skills/app-dev/shadcn/SKILL.md

@@ -2,7 +2,7 @@
 name: shadcn
 description: "Add or debug shadcn/ui in a React/Next.js project: components.json, shadcn init/add, presets, registries, Tailwind styling, base/radix/aria composition, component fixes, and list-index pages — where the default is the DiceUI data table with filter/sort/pagination in the URL via nuqs, not a bare shadcn Table."
 allowed-tools: Bash(npx shadcn@latest *), Bash(pnpm dlx shadcn@latest *), Bash(bunx --bun shadcn@latest *)
-release-version: 0.45.2
+release-version: 0.46.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # shadcn/ui

package/skills/app-dev/zod-v4/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: zod-v4
 description: Zod v4 schema conventions and v3 migration for errors, validators, objects, enums, records, and async parsing.
-release-version: 0.45.2
+release-version: 0.46.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Zod v3 to v4 Migration